Linux环境下搭建Web网站

实验内容
1.基于域名www.openlab.com可以访问网站内容为 welcome to openlab!!!

2.给该公司创建三个子界面分别显示学生信息，教学资料和缴费网站，基于www.openlab.com/student 网站访问学生信息，www.openlab.com/data网站访问教学资料www.openlab.com/money 站访问缴费网站

实验要求
(1)学生信息网站只有song和tian两人可以访问，其他用户不能访问

(2) 访问缴费网站实现数据加密基于https访问

实验步骤：

1.准备工作

[root@node1 ~]# setenforce 0    #关闭selinux
setenforce: SELinux is disabled
[root@node1 ~]# systemctl stop firewalld    #关闭防火墙
[root@node1 ~]# yum install httpd mod_ssl -y    #下载httpd、mod_ssl
[root@node1 ~]# vim /etc/hosts    #hosts映射

2.创建www.openlab.com网站

[root@node1 ~]# mkdir -p /www/openlab
[root@node1 ~]# echo 'welcome to openlab' > /www/openlab/index.html
[root@node1 ~]# vim /etc/httpd/conf/httpd.conf 
<virtualhost 192.168.74.129>
        DocumentRoot    /www/openlab
        Servername      "www.openlab.com"
        <Directory>
                AllowOverride   none
                require all granted
        </directory>
</virtualhost>
[root@node1 ~]# systemctl restart httpd

在Linux虚拟机firefox中输入www.openlab.com查看：

3.创建www.openlab.com/data网站

[root@node1 ~]# mkdir /www/openlab/data
[root@node1 ~]# echo 'data' > /www/openlab/data/index.html
[root@node1 ~]# vim /etc/httpd/conf/httpd.conf
<virtualhost 192.168.74.129>
        DocumentRoot    /www/openlab/data
        Servername      "www.openlab.com"
        alias   /data   /www/openlab/data
        <Directory /www/openlab/data>
                AllowOverride   none
                require all granted
        </directory>
</virtualhost>

在Linux虚拟机firefox中输入www.openlab.com/data查看：

 

4.创建www.openlab.com/student网站

[root@node1 ~]# mkdir /www/openlab/student
[root@node1 ~]# echo 'student' > /www/openlab/student/index.html
[root@node1 ~]# useradd song
[root@node1 ~]# passwd song #密码设置为123
[root@node1 ~]# useradd tian
[root@node1 ~]# passwd tian #密码设置为654321
[root@node1 ~]# htpasswd -c /etc/httpd/passwd song
[root@node1 ~]# htpasswd  /etc/httpd/passwd tian
[root@node1 ~]# vim /etc/httpd/conf/httpd.conf 
        <Directory /www/openlab/student>
                AllowOverride   none
                authuserfile    /etc/httpd/passwd
                authname        "student"
                authtype        basic
                require user song tian granted
        </directory>
[root@node1 ~]# systemctl restart httpd

在Linux虚拟机firefox中输入www.openlab.com/student查看： 

 

5.创建www.openlab.com/money网站

#1.创建验证证书真实性的私钥文件
[root@node1 ~]# mkdir /www/openlab/money
[root@node1 ~]# echo 'money' > /www/openlab/money/index.html
[root@node1 ~]# openssl genrsa -aes128 2048 > /etc/pki/tls/private/money.key    #创建私钥文件
    Enter PEM pass phrase:    # 设置私钥文件加密的密码123456
    Verifying - Enter PEM pass phrase:    # 在输入一遍
 
#2.创建数字证书
[root@node1 ~]# openssl req -utf8 -new -key /etc/pki/tls/private/money.key -x509 -days 365 -out /etc/pki/tls/certs/money.crt    #创建数字证书
    Enter pass phrase for /etc/pki/tls/private/money.key:
    You are about to be asked to enter information that will be incorporated
    into your certificate request.
    What you are about to enter is what is called a Distinguished Name or a DN.
    There are quite a few fields but you can leave some blank
    For some fields there will be a default value,
    If you enter '.', the field will be left blank.
    -----
    Country Name (2 letter code) [XX]:86    # 国家代码：86
    State or Province Name (full name) []:shaanxi    # 省份：shaanxi
    Locality Name (eg, city) [Default City]:xi'an    # 城市：xi'an
    Organization Name (eg, company) [Default Company Ltd]:openlab    # 公司：openlab
    Organizational Unit Name (eg, section) []:RHCE    # 部门：RHCE
    Common Name (eg, your name or your server's hostname) []:www.openlab.com    #主机名：www.openlab.com
    Email Address []:andy@openlab.com    # 邮箱：andy@qq.com

#3.修改s配置文件
[root@node1 ~]# vim /etc/httpd/conf/httpd.conf
    <VirtualHost 192.168.74.129:443>
        SSLEngine on
        SSLCertificateFile      /etc/pki/tls/certs/money.crt
        SSLCertificatekeyFile   /etc/pki/tls/private/money.key
        ServerName      www.openlab.com
        DocumentRoot    /www/openlab
        alias   /money  /www/openlab/money
        <Directory /www/openlab/money>
                AllowOverride   none
                require all     granted
        </Directory>
    </Virtualhost>